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Amendments to the Claims : 

This listing of claims will replace all prior versions, and listings, of claims in the 

application: 

Listing of Claims : 

1 . (currently amended) A method of validating a user for a transaction to be effectuated 
by using a transaction card, comprising th e st e ps of : 

configuring a biometric profile for said user, said biometric profile including a 
plurality of biometric samples received from the user, the plurality of biometric samples 
corresponding to a plurality of questions r e lating to said us e r : 

associating said biometric profile with an indicium assigned to said transaction 

card; 

biometrically interrogating said user when said transaction is attempted by said 
use r, wherein said biometrical interrogation includes querying said user for a biometric 
response associated with a randomly selected one of said plurality of questions : 

monitoring [[a]] said biometric response generated with respect to said user in 
response to said step of the biometrical interrogation; 

determining if said biometric response matches a biometric sample in said 
biometric profile corresponding to the randomly selected one of said plurality of 
questions : and 

if so, approving said user for said transaction. 

2. (currently amended) The method of validating a user for a transaction as set forth in 
claim 1, wherein at least a portion of said plurality of biometric samples comprises voice 
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samples generated by said user responsive to a plurality of questions directed to said user 

in said configuring step, and further wherein said step-ef biometrical interrogation 

involves querying said user for a voice response to a randomly selected question of said 

plurality of questions. 

3. (currently amended) The method of validating a user for a transaction as set forth in 
claim 1, further comprising th e st e ps of : 

prompting said user to input said indicium assigned to said 
transaction card after determining that said biometric response matches 
a biometric sample of said biometric profile; 

determining if said indicium is a valid personal identification number operating as 
a password associated with said transaction card; and 

denying access to said user for said transaction if said indicium is not a valid 
personal identification number associated with said transaction card. 

4. (currently amended) The method of validating a user for a transaction as set forth in 
claim 1, further comprising th e st e ps of : 

prompting said user to input said indicium assigned to said transaction card if said 
biometric response does not match a biometric sample of said biometric profile; 

confirming that said indicium is a valid personal identification number associated 
with said transaction card; and 

approving said user for said transaction upon said confirmation. 
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5. (currently amended) The method of validating a user for a transaction as set forth in 
claim 1, wherein th e st e p of configxiring a biometric profile for said user is effectuated 
manually. 

6. (currently amended) The method of validating a user for a transaction as set forth in 
claim 1, wherein th e st e p of configuring a biometric profile for said user is effectuated 
automatically. 

7. (currently amended) The method of validating a user for a transaction as set forth in 
claim 1, further comprising th e st e p of updating said biometric profile for said user. 

8. (currently amended) A method of validating a user for a call to be effectuated over a 
Public Switched Telephone Network (PSTN) using a calling card, comprising th e st e ps 
ef: 

configuring a personalized profile for said user, said personalized profile 
including a plurality of voice samples elicited from said user in response to a plurality of 
personalized questions directed to said user; 

associating said personalized profile with an indicium assigned to said calling 

card; 

determining if a voice verification is needed with respect to said user when said 
call is attempted by said user; 

if so, querying said user for a voice response to a question that is randomly 
selected fi-om said plurality of personalized questions; 
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verifying if said voice response matches a corresponding voice sample in said 
voice profile; and 

if so, approving said user for said call involving said calling card. 

9. (currently amended) The method of validating a user for a call as set forth in claim 8, 
further comprising th e st e ps of : 

populating at least a portion of said personalized profile v^th a plurality of Dual 
Tone Multi Frequency (DTMF) sample responses elicited fi-om said user in said 
configuration step; 

prompting said user to input a DTMF response in response to said question that is 
randomly selected from said plurality of personalized questions; 

verifying if said DTMF response matches a corresponding sample response in 
said personalized profile; and 

denying access to said user for said call if said DTMF response does not match 
said corresponding sample response in said personalized profile. 

10. (currently amended) The method of validating a user for a call as set forth in claim 8, 
further comprising the stops of : 




prompting said user to input said indicium assigned to said calling card after 
verifying that said voice response matches a corresponding voice sample in said voice 
profile; 

determining if said indicium is a valid personal identification number associated 
with said calling card; and 




-5- 



PATENT 

U.S. Patent Application No. 09/627,558 
Attorney Docket No. COS99070 

denying access to said user for said call if said indicium is not a valid personal 

identification number associated with said calling card. 

1 1 . (currently amended) The method of validating a user for a call as set forth in claim 8, 
further comprising th e st e ps of : 

prompting said user to input said indicium assigned to said calling card after 
verifying that said voice response does not match a corresponding voice sample in said 
voice profile; 

confirming that said indicium is a valid personal identification number associated 
with said calling card; and 

approving said user for said call upon said confirmation. 

12. (currently amended) A fraud prevention method for use in a transaction-card-based 
system having a conventional authentication process, said comprising th e st e ps of : 

determining, by utiUzing said conventional authentication process, if a fi-audulent 
transaction is being attempted in said transaction-card-based system by a user using a 
transaction card; 

if so, biometrically interrogating said user to obtain a biometric sample fi*om said 
user; and 

upon obtaining said biometric sample, denying access to said user for said 
transaction in said transaction-card-based system if said biometric sample does not match 
an entry stored in a biometric profile database inherently associated with said transaction 
card's owner. 
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13. (original) The fraud prevention method for use in a transaction-card-based system as 
set forth in claim 12, wherein said fraudulent transaction is selected from the group 
comprising consisting of : placing a calling card call, accessing personal information data, 
accessing a bank account, accessing an Internet account, accessing a credit report, 
accessing employment records, and accessing medical records. 

14. (original) The fraud prevention method for use in a transaction-card- based system as 
set forth in claim 12, wherein said entry inherently associated with said transaction card's 
owner comprises a voiceprint associated with said owner. 

15. (original) The fraud prevention method for use in a transaction-card-based system as 
set forth in claim 12, wherein said entry inherently associated with said transaction card's 
owner comprises at least one of a fingerprint, retinal scan, pahn print, and implanted ID 
chip associated with said owner. 

16. (currently amended) An access control system for use with a transaction-card- based 
scheme, said system comprising: 

a network operable with a terminal, said terminal for interacting with a user in 
association with a transaction card; 

a controller disposed in the network to query said user when said user attempts a 
transaction using said transaction card; 

a server disposed in the network, said server responding to messages fi-om said 
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controller with respect to querying said user; and 

a profile database coupled to said server, said profile database having a plurality 
of biometric samples inherently coupled to said user, wherein said plurality of biometric 
samples relate to a plurality of questions, and wherein said biometric samples are 
associated with an indicium assigned to said transaction card such that when said user 
attempts said transaction, said controller queries said user for a response th e r e to relating 
to a randomly selected one of the biometric samples and if said response does not match a 
corresponding entry in said profile database, access is denied to said user for said 
transaction. 

1 7. (original) The access control system for use with a transaction-card-based scheme as 
set forth in claim 16, wherein said entry inherently coupled to said user comprises at least 
one of a fingerprint, retinal scan, palm print, and implanted ID chip associated v^th said 
user. 

18. (original) The access control system for use v^th a transaction-card-based scheme as 
set forth in claim 16, wherein said entry inherently coupled to said user comprises a 
voiceprint associated with said user. 

19. (original) The access control system for use with a transaction-card-based scheme as 
set forth in claim 16, wherein said controller comprises an Automated Response Unit 
associated with a Public Switched Telephone Network. 
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20. (original) The access control system for use with a transaction-card-based scheme as 

set forth in claim 16, wherein said terminal comprises a wireline phone. 



21. (original) The access control system for use with a transaction-card based scheme as 
set forth in claim 16, wherein said terminal comprises an Internet phone. 



22. (original) The access control system for use with a transaction-card-based scheme as 
set forth in claim 1 6, wherein said terminal comprises a wireless medium device. 



